Release date:
2026-08-06 14:34:49 UTC
Description:
- CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour)
- CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite)
- CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification
- CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification
- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread
Updated packages:
-
gnutls-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:2963fc97f234be1a943551019009d70f89b547d8ff6a3664c175f2db6df48f1c
-
gnutls-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:df16eb97338a76635c4ba4a84f37c53c95f70abcf8eadfd1a5c38d73c4304385
-
gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:4c5573866530682af8a639ddf1890e47dbd168f31ed6669d92cb91aab81d89fd
-
gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:19a3a3729521454b64a9ba6be0b0c4c4b6e21c49800f2d93c9a3df5e7ee05efb
-
gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:0c569adeb8c4437f7e45e00c97466e86fe62cba14c7fda40abe630f9d6e47654
-
gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:a963eabd9a31334dc0eca348b750053914a8d9a68a6c490b4ca1eb7885f252e1
-
gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:457d3805b6ff164bfa1b3bedb4f53679fd7469fa09a4a76e9f25be88d4723969
-
gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:92a508608d2e2afee894bfbd722720c260bf0b323c8173d62e8b52039e0e2c73
-
gnutls-utils-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:d512984bc3d6ebe6e9054d95334f52e98da224ef56c5983f30f2aea60abe1ed6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
